Declaw sandboxes - CostGraph Documentation

Declaw runs Firecracker microVM sandboxes with a built-in security layer (PII scanning, prompt-injection defense, TLS-intercepting egress proxy, per-sandbox network policies). The following table shows what CostGraph runs on this provider.

Workflows	CI runners	Connect with
Yes	No	Your own dispatcher

CI runners: no. AutoPilot compares runners by price, and this provider publishes no sandbox price.

Connect

Run the dispatcher with provider set to declaw and these variables:

DECLAW_API_KEY

Key and permissions

DECLAW_API_KEY is a Declaw API key (prefix dcl_) from the Declaw console (console.declaw.ai). The provider doesn’t document key scopes or roles. Sources: docs.declaw.ai: home, declaw.ai: home, github.com: declaw ai.